WO2018176531A1

WO2018176531A1 - Video request and video playing method and apparatus

Info

Publication number: WO2018176531A1
Application number: PCT/CN2017/081237
Authority: WO
Inventors: 周志刚; 张文明; 陈少杰
Original assignee: 武汉斗鱼网络科技有限公司
Priority date: 2017-03-31
Filing date: 2017-04-20
Publication date: 2018-10-04
Also published as: CN107426589B; WO2018176816A1; CN107426589A

Abstract

The present invention discloses a video request and video playing method and apparatus, applied to the technical field of communications. The video playing method comprises: receiving a video stream address request sent by a user terminal for a target video; and if a viewer corresponding to the user terminal has viewing permission for the target video, returning, to the user terminal, a first key value for characterizing a video type of the target video and a second key value for characterizing a permission range of the viewer; and returning the target video to the user terminal if a terminal side authentication key value sent by the user terminal and generated for the target video on the basis of the first key value and the second key value is received. The present invention resolves the technical problem in the prior art of low video stream address security, thereby greatly enhancing video stream address authentication accuracy, and avoiding unauthorized acquisition of video stream addresses, improving security of video stream addresses.

Description

Video request, video playing method and device

Technical field

The present invention relates to the field of communications technologies, and in particular, to a video request, a video playing method, and a device.

Background technique

At present, the live video broadcast is performed by using the Internet and streaming media technology, and then the video content provider has the video stream address obtained by the third-party platform, so that the video can be directly viewed without going through the live website, that is, the video player bypassing the live website. The video provided is also played. At the same time, there are some paid video content for the live website. For example, the ticket room of the live website can only be viewed when the ticket is purchased. For example, similar to some video websites, only the VIP member can purchase the VIP video, so If the video stream address is stolen, the user who has not purchased the ticket can directly view the ticket room, and the user who does not purchase the VIP member can directly watch the VIP video, and also brings the risk of personal information leakage to the user.

In order to prevent the video stream address from being stolen, the prior art encrypts the video stream address to prevent the video stream address from being stolen, but only the encrypted video stream address is easily cracked, so the video stream address is low in security. Video is easily obtained illegally.

Summary of the invention

The embodiment of the invention solves the technical problem of low video stream address security in the prior art by providing a video request, a video playing method and a device.

In a first aspect, an embodiment of the present invention provides a video playing method, which is applied to a server, where the method includes:

Receiving a video stream address request for the target video sent by the user terminal;

Returning, to the user terminal, a first Key value for characterizing a video type of the target video and a permission range for characterizing the viewing user, if a viewing user corresponding to the user terminal has viewing rights to the target video a second Key value, or returning, to the user terminal, a first Key value for characterizing a video type of the target video, a second Key value for characterizing a permission range of the viewing user, and a random number;

Receiving, by the user terminal, a terminal-side authentication key value for the target video generated based on the first key value and the second key value, or receiving a base station sent by the user terminal When the first key value, the second key value, and the terminal-side authentication key value generated by the random number for the target video are generated, the target video is returned to the user terminal.

Optionally, if the video stream address request carries the user identification letter of the viewing user The method further includes:

Determining whether the viewing user has viewing rights to the target video according to the correspondence between the user identification information and the permission range.

Optionally, if the video stream address request carries the request identification identifier group, after the receiving the user terminal sends the video stream address request for the target video, the method further includes:

Generating a server side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group; or, based on the first key value, the second key a value, the random number, and the request identification identifier group generate a server side authentication key value for the target video;

Comparing the received authentication key values with the server-side authentication key values for the target video respectively;

If consistent, the received authentication key value is a terminal-side authentication key value for the target video.

Optionally, the generating the server-side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group, including:

Inputting the first key value and the second key value into the MD5 algorithm to obtain an intermediate key value;

And inputting the intermediate key value and the request identification identifier group into an RSA encryption algorithm to obtain a server side authentication key value for the target video; or

And generating, by the first key value, the second key value, the random number, and the request identification identifier group, a server side authentication key value for the target video, including:

And inputting the first key value, the second key value, and the random number into an MD5 algorithm to obtain an intermediate key value;

And inputting the intermediate key value and the request identification identifier group into an RSA encryption algorithm to obtain a server side authentication key value for the target video.

Optionally, the request identifies the identifier group, including:

Characterizing a time identifier of a time at which the user terminal sends the video stream address request, and at least one terminal feature of the user terminal: a token when the viewing user logs in to the server, and a uniqueness of the user terminal ID, the current IP address of the user terminal.

Optionally, it also includes:

Obtain server system time;

Determining, by using the system time, whether the time that the user terminal is configured to send the video stream address request and the system time is within a preset reporting time threshold, and if yes, determining The reporting time of the video stream address request is correct, otherwise, the video stream is determined. The reporting time of the address request is incorrect, and the video stream address request is rejected.

Optionally, if the target video is a target network live video, the request identification identifier group further includes a room identification code where the target network live video is located, and the second key value includes a permission range of the viewing user. The live type identification code and the room identification code of the live network video.

In a second aspect, an embodiment of the present invention provides a video requesting method, which is applied to a user terminal, and includes:

Sending a video stream address request for the target video to the server;

Receiving, by the server, a first Key value for characterizing a video type of the target video and a second Key value for characterizing a permission range of the viewing user; or receiving a representation for returning by the server a first Key value of a video type of the target video, a second Key value for characterizing a permission range of the viewing user, and a random number;

Generating, by the first key value and the second key value, a terminal-side authentication key value for the target video, and sending the value to the server, or according to the first key value and the second key value. And generating, by the random number, a terminal side authentication key value for the target video, and sending the value to the server, so that the server receives the terminal side authentication key value for the target video to the user terminal Returning the target video;

Receiving the target video from the server.

Optionally, if the video stream address request carries the request identification identifier group, the generating, according to the first key value and the second key value, a terminal side authentication key value for the target video and sending To the server, including:

Generating, by the first key value, the second key value, and the request identification identifier group, a terminal side authentication key value for the target video;

Sending, to the server, a terminal side authentication key value for the target video; or

And generating the terminal-side authentication key value for the target video according to the first key value, the second key value, and the random number, and sending the value to the server, including:

Generating, by the first key value, the second key value, the random number, and the request identification identifier group, a terminal side authentication key value for the target video;

A terminal side authentication key value for the target video is sent to the server.

Optionally, the generating, by the first key value, the second key value, and the request identification identifier group, a terminal side authentication key value for the target video, including:

Inputting the intermediate key value and the request identification identifier group into an RSA encryption algorithm to obtain an operation The terminal side authentication key value for the target video; or

And generating, by the first key value, the second key value, the random number, and the request identification identifier group, a terminal side authentication key value for the target video, including:

And inputting the intermediate key value and the request identification identifier group into an RSA encryption algorithm to obtain a terminal side authentication key value for the target video.

Optionally, the request identification identifier group carried in the video stream address request includes:

Optionally, if the target video is a target network live video, the request identification identifier group further includes a room identification code where the target network live video is located, and the second key value includes the permission range of the viewing user. The video type identification code of each webcast video and the room identification code.

In a third aspect, an embodiment of the present invention provides a video playback device, which is applied to a server, where the video playback device includes:

An address request receiving module, configured to receive a video stream address request for the target video sent by the user terminal;

a Key value sending module, configured to return, to the user terminal, a first Key value for characterizing a video type of the target video and for characterization if a viewing user corresponding to the user terminal has viewing rights to the target video Viewing a second Key value of the user's permission range, or returning to the user terminal a first Key value for characterizing the video type of the target video, and a second key for characterizing the permission range of the viewing user Value and random number;

a video returning module, configured to receive, when used by the user terminal, a terminal-side authentication key value for the target video generated by using the first key value and the second key value, or for receiving a location Returning the target video to the user terminal when the terminal-side authentication key value for the target video generated by the user terminal is generated based on the first key value, the second key value, and the random number .

Optionally, if the video stream address request carries the user identification information of the viewing user, the device further includes:

The authority discriminating module is configured to determine, according to the correspondence between the user identification information and the permission range, whether the viewing user has viewing rights to the target video.

Optionally, if the video stream address request carries the request identification identifier group, the device further includes:

An authentication key value generating module, configured to generate a server side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group, or Generating, by the first Key value, the second Key value, the random number, and the request identification identifier group, a server side authentication key value for the target video;

The authentication key value comparison module is configured to compare the received authentication key value with the server-side authentication key value of the target video, and if yes, the received authentication key value is The terminal side authentication key value of the target video.

Optionally, the authentication key value generating module is specifically configured to:

Inputting the first key value and the second key value into the MD5 algorithm to calculate an intermediate key value, or input the first key value, the second key value, and the random number into the MD5 algorithm to The operation obtains an intermediate Key value;

Optionally, the request identifies the identifier group, including:

In a fourth aspect, an embodiment of the present invention provides a video requesting apparatus, which is applied to a user terminal, where the video requesting apparatus includes:

An address request sending module, configured to send a video stream address request for the target video to the server;

a Key value receiving module, configured to receive a first Key value returned by the server for characterizing a video type of the target video, and a second Key value for characterizing a permission range of the viewing user, or for receiving Determining, by the server, a first Key value for characterizing a video type of the target video, a second Key value for characterizing a permission range of the viewing user, and a random number;

An authentication key value obtaining module, configured to generate, according to the first key value and the second key value, a terminal side authentication key value for the target video, and send the value to the server, or according to the foregoing a Key value, the second Key value, and the random number generate a terminal side authentication Key value for the target video and send the value to the server, so that the server receives the terminal side for the target video Returning the target video to the user terminal when authenticating the Key value;

a video receiving module, configured to receive the target video from the server.

Optionally, if the video stream address request carries the request identification identifier group, the authentication key value obtaining module includes:

An authentication key value generating unit, configured to generate a terminal side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group, or for using the Generating, by the first Key value, the second Key value, the random number, and the request identification identifier group, a terminal side authentication key value for the target video;

The authentication key value sending unit is configured to send the terminal side authentication key value for the target video to the server.

Optionally, the authentication key value generating unit is specifically configured to:

One or more technical solutions provided in the embodiments of the present invention have at least the following technical effects or advantages:

The technical solution provided by the present invention is: receiving a video stream address request for a target video sent by a user terminal; and if the viewing user corresponding to the user terminal has viewing rights to the target video, returning a video for characterizing the target video to the user terminal a first Key value of the type and a second Key value for characterizing a permission range of the viewing user; receiving the terminal-side authentication Key value for the target video generated by the user terminal based on the first Key value and the second Key value Return the target video to the user terminal. It can be seen that the video stream address is authenticated according to the video type of the target video and the permission range of the viewing user, so that different types of the target video and different viewing rights of the viewing user are calculated, and different server side and terminal side are calculated. For the authentication KEY value for authenticating the video stream address, the server only returns the requested target video for the user terminal that generates the authentication KEY value based on the first and second KEY values, so only the viewing rights of the target video are actually available. The user can obtain the target video from the server, otherwise the server will refuse to deliver the target video. Thereby greatly enhancing the accuracy of video stream address authentication It is true that the video stream address can be prevented from being illegally acquired, thus improving the security of the video stream address.

In a preferred solution, the server sends the first key value and the second key value to the terminal, and the server also generates a random number (the client regenerates each request) and sends the same to the terminal. The number and the terminal feature are combined to calculate the final authentication key value. The advantage of increasing the random number is that the time value cannot be completely guaranteed because one dimension of the time parameter always changes, because the time data is regular, so This adds a random number, which further enhances the randomness of the finally generated authentication Key value.

Further, the video stream address request carries the request identification identifier group, including the time identifier of the time when the user terminal sends the video stream address request, so that the generated authentication KEY values of the server side and the terminal side are dependent on non-repetitiveness and The reproducible time identifier further ensures that the calculated authentication KEY value will not be imitated every time, so when a viewing user requests the correct address, it cannot be used by other viewing users because a video stream address can only be used. Use once.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are some embodiments of the present invention. Other drawings may also be obtained from those of ordinary skill in the art in light of the inventive work.

FIG. 1 is a flowchart of a video playing method according to an embodiment of the present invention;

2 is a flowchart of a video request method according to an embodiment of the present invention;

FIG. 3 is a block diagram of a video playback apparatus according to an embodiment of the present invention;

FIG. 4 is a block diagram of a video requesting apparatus according to an embodiment of the present invention.

detailed description

In view of the technical problem that the video stream address security is low in the prior art, the embodiment of the present invention provides a video request, a video playing method, and a device. The general idea is as follows:

The video stream address is authenticated according to the first Key value of the video type of the target video and the second Key value for characterizing the viewing range of the viewing user. Therefore, for different types of target videos and different permission ranges of the viewing users, different authentication KEY values for authenticating the video stream addresses on the server side and the terminal side are calculated, and the server is only based on the first and second servers. The KEY value generates the target video of the user terminal that authenticates the KEY value, thereby greatly enhancing the accuracy of authenticating the video stream address, thereby preventing the video stream address from being illegally acquired, and improving the security of the video stream address. .

In order to better understand the above technical solutions, the following will be combined with the drawings and specific implementations. The above technical solutions are described in detail.

Referring to FIG. 1, an embodiment of the present invention provides a video playing method, including the following steps:

S101. Receive a video stream address request for a target video that is sent by the user terminal.

S102. If the viewing user corresponding to the user terminal has the viewing right to the target video, return a first Key value for characterizing the video type of the target video and a second Key value for characterizing the permission range of the viewing user to the user terminal;

S103. When receiving the terminal-side authentication key value for the target video generated by the user terminal and based on the first key value and the second key value, returning the target video to the user terminal.

It should be noted that, in the embodiment of the present invention, the target video may be a live webcast video or a recorded video resource stored on a server.

Each step of the video playing method provided by the embodiment of the present invention is described in detail below with reference to FIG. 1 :

First, executing S101: receiving a video stream address request for the target video sent by the user terminal.

Specifically, the server is provided with a ticket system or a VIP authentication system, and different types of tickets are set for webcast videos of different video types, and different types of VIPs are set for recording videos of different video types. Specifically, taking the live webcast video as an example, if the viewing user's permission range of the game ticket is all game-type live rooms, the viewing user with the game ticket has the viewing right for the game-like video; and the viewing range of the viewing user with the sports ticket For all sports live rooms, the viewing users who have game tickets have the right to watch sports videos; the viewing rights of the viewing users with variety tickets are the variety live rooms, and the viewing users with game tickets have watched the variety videos. Permissions.

The ticket system is configured to identify whether the viewing user corresponding to the user terminal that sends the video stream address request has a ticket of the video type to which the target video belongs, thereby determining whether the viewing user has viewing rights to the target video.

Next, executing S102: if the viewing user corresponding to the user terminal has the viewing right to the target video, returning, to the user terminal, a first Key value for characterizing the video type of the target video and a second for characterizing the permission range of the viewing user Key value.

In an embodiment, in order to determine whether the viewing user has the viewing right for the target video, the video stream address request carries the user identification information of the viewing user corresponding to the user terminal, such as a username and a password. The server stores the permission range corresponding to each user identification information, so that the server determines whether the viewing user corresponding to the user terminal has the viewing right for the target video according to the correspondence between the user identification information and the permission range. If the viewing user does not have the viewing right for the target video, the server directly rejects the video stream address request of the user terminal, and does not return to the user terminal the first Key value for characterizing the video type of the target video and the permission range for characterizing the viewing user. The second key value. If the viewing user has viewing rights to the target video, the server returns a video type for characterizing the target video to the user terminal. The first Key value and a second Key value used to characterize the scope of viewing of the viewing user.

In the ticket system, there is a corresponding one-to-one ticket class KEY value for each ticket type. The ticket class KEY value corresponds to the video type one by one, and the ticket class KEY value may be a random string, then the first key value is A string representing the video type of the target video. For example, if the target video is a sports video, the first key value is specifically a character string indicating that the target video is a sports video. For example, if the target video is a game video, the first key value is specifically to represent the target video as a game video. String.

If the target video is the target network live video, the second key value includes the live broadcast type identification code and the room identification code of each live webcast video within the scope of the user's permission.

The live type identification code and the room identification code of each live webcast video in the user's permission range are input into the MD5 algorithm, and the second KEY value is obtained by the operation:

KEY2=MD5.create(roomid+type)

The roomid is the room identification code of each webcast live video within the scope of the user's permission, and the type is the live type identification code of each webcast live video within the scope of the user's permission.

After the execution of S102, the process proceeds to S103. When the terminal-side authentication key value for the target video generated based on the first key value and the second key value sent by the user terminal is received, the target video is returned to the user terminal.

Specifically, the terminal-side authentication key value of the target video is specifically generated by the user terminal according to the following manner:

If the user terminal receives the first key value and the second key value from the server, the user terminal generates a terminal side authentication key value for the target video based on the first key value and the second key value, and sends the value to the server. The video type of the target video and the permission range of the viewing user are used as the KEY value of the video stream address authentication, so that different authentication KEY values can be obtained for different video types and different permission ranges, and the same video stream address is sent. Receiver: The server and the user terminal can always maintain the same authentication KEY value, which can greatly improve the accuracy of video address authentication and avoid illegal acquisition.

Further, if the video stream address request carries the request identification identifier group, the terminal side authentication key value for the target video is generated based on the first key value, the second key value, and the request identification identifier group.

Specifically, the request identification identifier group includes a time identifier indicating a time when the user terminal sends the video stream address request, and a terminal feature of at least one type of user terminal: a token (Token) when the user logs in to the server, and a unique ID of the user terminal. (UDID, Unique Device Identifier), the current IP address of the user terminal. Therefore, the video stream address authentication is performed depending on the time, so that the calculated video stream address is different each time, because the uniqueness of time makes a video stream address only Can be used once, so when the viewing user requests the correct video stream address is not available to others, further improving the security of the video stream address.

It should be noted that, for the foregoing time identifier, whether the time for the terminal to send the video stream address request is appropriate may be determined according to the system time. The main consideration of this kind of processing is that the server's system time is definitely correct, but the client's time may be that the hacker deliberately modifies the time to facilitate the hacker to crack the video stream address. The time parameter can play a good role in random data, so To ensure the accuracy of time.

Specifically, for the time identifier sent by the terminal, the server obtains the time of the server system to determine whether the time reported by the client is very different from the server time (for example, by setting a reporting time threshold), if the difference is very small, the client is The reporting time is correct, otherwise the time reported by the client is wrong, otherwise the client video stream address request is rejected.

Therefore, in a preferred mode, the method further includes the steps of: acquiring a server system time; determining, by using the system time, a time that the user terminal that is characterized by the time identifier sends the video stream address request and the Whether the system time difference is within a preset reporting time threshold, and if yes, determining that the reporting time of the video stream address request is correct; otherwise, determining that the reporting time of the video stream address request is incorrect, rejecting the video stream address request.

It should be noted that, if the target video is the target network live video, the request identification identifier group carried in the video stream address request further includes the room identification code of the target network live video, thereby further improving the video stream address security of the webcast video.

In order to verify that the received authentication key value is a terminal-side authentication key value for the target video generated by the user terminal based on the first key value and the second key value, instead of the authentication key value from other terminals. The server side provides the following implementation process:

The server generates a server-side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group, and compares the received authentication key value with the server-side authentication key value for the target video. Whether it is consistent; if it is consistent, the received authentication key value is a terminal-side authentication key value for the target video generated by the user terminal based on the first key value and the second key value, and the server returns the target to the user terminal. Video; if it is inconsistent, the received authentication key value is sent by other terminals, and the target video is rejected.

Specifically, for example, the manner in which the server side performs the generation of the server-side authentication key value is an implementation manner of combining the MD5 (message digest algorithm) algorithm and the RSA encryption algorithm:

First, the first Key value and the second Key value are input into the MD5 algorithm to obtain an intermediate Key value:

NewKey=MD5.Create(KEY1+KEY2)

Among them, NewKey is the intermediate Key value, KEY1 is the first Key value, and KEY2 is the second Key value.

Then, the intermediate key value and the request identification identifier group are input into the RSA encryption algorithm to calculate the server side authentication key value for the target video:

KEY=RSA.encrypt(Token+Roomid+ID+IP+Time, NewKey);

The time parameter is the time identifier of the user terminal to send the video stream address request, the Token parameter is the token when the user logs in to the server, the ID parameter is the unique ID of the user terminal (UDID, Unique Device Identifier), and the IP parameter is the current state of the user terminal. IP address.

The RSA encryption algorithm is taken as an example in the embodiment of the present invention, but other asymmetric encryption algorithms, such as an elliptic curve algorithm, may also be used. The RSA encryption algorithm is an asymmetric encryption algorithm. The RSA algorithm is characterized by the ability to generate a pair of public and private keys (the public and private keys are uniquely paired. If the data is encrypted with a public key, only the private key can be decrypted. Out of the original data, the server will send the first key value to the client, and the server can generate a private key Key according to the first key value (as the public key of the RSA) through the RSA algorithm (and store the private key, The subsequent terminal reports the characteristics of the terminal. When the terminal receives the first key value of the server, when the terminal features of the terminal are reported, the characteristics of the terminal (token, ID, IP, etc.) are encrypted by using the RSA algorithm. After receiving the reported data, the server uses the private key generated by RSA to decrypt it. The advantage of this processing is that the information reported by the terminal is encrypted to ensure the security of the data reported by the terminal, and the RSA algorithm is used to encrypt, so the hacker cannot decrypt even if the information is intercepted without the private key, because the private key is only stored by the server. .

In addition, in a preferred mode, the server sends the first key value and the second key value to the terminal, and the server also generates a random number (the client regenerates each request) and sends the same to the terminal. The number will be calculated together with the terminal characteristics to obtain the final authentication key value. The advantage of increasing this random number is that the time value cannot be completely guaranteed because one dimension of the time parameter always changes, because the time data is regular, so here Adding a server to send a random number further strengthens the randomness of the finally generated authentication key value.

As described above, when the server returns only the first Key value and the second Key value to the terminal, the calculation of the authentication Key value is:

KEY=RSA.encrypt(Token+Roomid+ID+IP+Time, NewKey)

Then, when the server returns the first key value, the second key value, and the random number to the terminal, the calculation change of the authentication key value is:

KEY=RSA.encrypt(Token+Roomid+ID+IP+Time+Random, NewKey)

In the rest of the follow-up, it is also necessary to add Random. Both the server and the terminal are added together with the random number when calculating the final authentication key. This random number is sent by the server because it is generally considered that the server is definitely safe.

For example, the generating, by the first key value, the second key value, the random number, and the request identification identifier group, a server side authentication key value for the target video, including: a Key value, the second Key value, and the random number input MD5 algorithm, to obtain an intermediate Key value; and input the intermediate Key value and the request identification identifier group into an RSA encryption algorithm, to obtain an operation A server side authentication key value for the target video. Based on the same inventive concept, an embodiment of the present invention provides a video requesting method, which is applied to a user terminal corresponding to the foregoing video playing method. Referring to FIG. 2, the video requesting method includes:

S201. Send a video stream address request for the target video to the server.

S202. Receive a first Key value returned by the server for characterizing a video type of the target video, and a second Key value used to represent a permission range of the viewing user.

S203. Generate a terminal-side authentication key value for the target video according to the first key value and the second key value, and send the value to the server, so that the server returns the target video to the user terminal when receiving the terminal-side authentication key value for the target video. ;

S204. Receive a target video from a server.

In the embodiment of the present invention, S203 includes the following refinement steps:

Generating a terminal side authentication key value for the target video based on the first Key value, the second Key value, and the request identification identifier group.

Specifically, an implementation manner of generating a terminal-side authentication key value for the target video is specifically:

Specifically, the request identification identifier group carried in the video stream address request includes: a time identifier indicating a time at which the user terminal sends the video stream address request, and at least one terminal feature of the user terminal as follows: The token when the user logs in to the server, the unique ID of the user terminal, and the current IP address of the user terminal are viewed.

Specifically, if the target video is a target network live video, the request identification identifier group further includes a room identification code where the target network live video is located, and the second key value includes each part of the viewing user's permission range. The video type identifier of the live webcast video and the room identification code.

The embodiment of the present video request method corresponds to the technical features in the implementation of the foregoing video playing method. Therefore, based on the video playing method introduced by the present invention, those skilled in the art can understand the implementation manner of the video requesting device, and thus will not be described herein. .

Based on the same inventive concept, an embodiment of the present invention provides a video playing device for implementing the foregoing video playing method, which is applied to a server. Referring to FIG. 3, the video playing device includes:

The address request receiving module 301 is configured to receive a video stream address request for the target video sent by the user terminal;

The Key value sending module 302 is configured to: if the viewing user corresponding to the user terminal has the viewing right to the target video, return a first Key value for characterizing the video type of the target video to the user terminal, and Characterizing a second Key value of the range of rights of the viewing user;

a video returning module 303, configured to receive, by the user terminal, a terminal-side authentication key value for the target video generated by the first key value and the second key value, to the user terminal Return to the target video.

In the embodiment of the present invention, if the video stream address request carries the user identification information of the viewing user, the device further includes:

In the embodiment of the present invention, if the video stream address request carries the request identification identifier group, the device further includes:

An authentication key value generating module, configured to generate a server side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group;

In the embodiment of the present invention, the authentication key value generating module is specifically configured to:

In the embodiment of the present invention, the request identifying the identifier group includes:

In the embodiment of the present invention, if the target video is a target network live video, the request identification identifier group further includes a room identification code where the target network live video is located, and the second key value includes the viewing user. The live type identification code and the room identification code of each webcast live video within the scope of the permission.

The video playback device is a device for implementing the foregoing video playback method according to the embodiment of the present invention. Therefore, based on the video playback method introduced by the present invention, those skilled in the art can understand the specific structure and deformation of the video playback device, and thus No longer. Any device used in the video playing method of the present invention is within the scope of the present invention.

Based on the same inventive concept, an embodiment of the present invention further provides a video requesting apparatus for implementing the foregoing video requesting method, which is applied to a user terminal. Referring to FIG. 4, the video requesting apparatus includes:

An address request sending module 401, configured to send a video stream address request for the target video to the server;

The Key value receiving module 402 is configured to receive a first Key value returned by the server for characterizing a video type of the target video and a second Key value used to represent a permission range of the viewing user;

The authentication key value obtaining module 403 is configured to generate a terminal side authentication key value for the target video according to the first key value and the second key value, and send the value to the server, so that the server receives Returning the target video to the user terminal when the terminal side authentication key value is used for the target video;

The video receiving module 404 is configured to receive the target video from the server.

In the embodiment of the present invention, if the video stream address request carries the request identification identifier group, the authentication key value obtaining module 403 includes:

The authentication key value generating unit is configured to generate a terminal side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group;

In the embodiment of the present invention, the authentication key value generating unit is specifically configured to:

In the embodiment of the present invention, the request identification identifier group carried in the video stream address request includes:

Characterizing a time identifier of the time at which the user terminal sends the video stream address request, and At least one terminal feature of the user terminal: the token when the user logs in to the server, the unique ID of the user terminal, and the current IP address of the user terminal.

In the embodiment of the present invention, if the target video is a target network live video, the request identification identifier group further includes a room identification code where the target network live video is located, and the second key value includes the rights of the viewing user. The video type identification code and the room identification code of each webcast video in the range.

The present video requesting device is an electronic device used in the foregoing video requesting method according to the embodiment of the present invention. Therefore, those skilled in the art can understand the specific structure and deformation of the video requesting device based on the method described in the video requesting method embodiment of the present invention. Therefore, it will not be repeated here. The apparatus used in the video request method of the present invention is within the scope of the present invention.

The technical solution provided by the above invention has at least the following technical effects or advantages:

The technical solution provided by the present invention is: receiving a video stream address request for a target video sent by a user terminal; and if the viewing user corresponding to the user terminal has viewing rights to the target video, returning a video for characterizing the target video to the user terminal a first Key value of the type and a second Key value for characterizing a permission range of the viewing user; receiving the terminal-side authentication Key value for the target video generated by the user terminal based on the first Key value and the second Key value Return the target video to the user terminal. It can be seen that the video stream address is authenticated according to the video type of the target video and the permission range of the viewing user, so that different types of the target video and different viewing rights of the viewing user are calculated, and different server side and terminal side are calculated. For the authentication KEY value for authenticating the video stream address, the server only returns the requested target video for the user terminal that generates the authentication KEY value based on the first and second KEY values, so only the viewing rights of the target video are actually available. The user can obtain the target video from the server, otherwise the server will refuse to deliver the target video. Therefore, the accuracy of authenticating the video stream address is greatly enhanced, and the video stream address can be prevented from being illegally acquired, thereby improving the security of the video stream address.

In a preferred solution, the server sends the first key value and the second key value to the terminal, and the server also generates a random number (the client regenerates each request) and sends the same to the terminal. The number and the terminal feature are combined to calculate the final authentication key value. The advantage of increasing the random number is that the time value cannot be completely guaranteed because one dimension of the time parameter always changes, because the time data is regular, so This adds a random number, which further strengthens The randomness of the final generated authentication key value.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

While the preferred embodiment of the invention has been described, it will be understood that Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and the modifications and

It is apparent that those skilled in the art can make various modifications and variations to the invention without departing from the spirit and scope of the invention. Thus, it is intended that the present invention cover the modifications and modifications of the invention

Claims

A video playing method is applied to a server, wherein the method includes:

Receiving a video stream address request for the target video sent by the user terminal;

Returning, to the user terminal, a first Key value for characterizing a video type of the target video and a permission range for characterizing the viewing user, if a viewing user corresponding to the user terminal has viewing rights to the target video a second Key value, or returning, to the user terminal, a first Key value for characterizing a video type of the target video, a second Key value for characterizing a permission range of the viewing user, and a random number;

Receiving, by the user terminal, a terminal-side authentication key value for the target video generated based on the first key value and the second key value, or receiving a base station sent by the user terminal When the first key value, the second key value, and the terminal-side authentication key value generated by the random number for the target video are generated, the target video is returned to the user terminal.
The video playing method according to claim 1, wherein if the video stream address request carries the user identification information of the viewing user, the method further includes:

Determining whether the viewing user has viewing rights to the target video according to the correspondence between the user identification information and the permission range.
The video playing method according to claim 1, wherein if the video stream address request carries a request identification identifier group, after the receiving user terminal sends a video stream address request for the target video, the The method also includes:

Generating a server side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group, or based on the first key value and the second key a value, the random number, and the request identification identifier group generate a server side authentication key value for the target video;

Comparing the received authentication key values with the server-side authentication key values for the target video respectively;

If consistent, the received authentication key value is a terminal-side authentication key value for the target video.
A video playing method according to claim 3, characterized in that

And generating the server-side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group, including: the first key value and the first Entering the MD5 algorithm to calculate an intermediate key value, and inputting the intermediate key value and the request identification identifier group into an RSA encryption algorithm to obtain a server side authentication key value for the target video; or

The identifying based on the first Key value, the second Key value, the random number, and the request The identifier group generates a server-side authentication key value for the target video, including: inputting the first key value, the second key value, and the random number into an MD5 algorithm to obtain an intermediate key value; The intermediate key value and the request identification identifier group input an RSA encryption algorithm to obtain a server side authentication key value for the target video.
The video playing method according to claim 3 or 4, wherein the requesting the identification of the identification group comprises:

Characterizing a time identifier of a time at which the user terminal sends the video stream address request, and at least one terminal feature of the user terminal: a token when the viewing user logs in to the server, and a uniqueness of the user terminal ID, the current IP address of the user terminal.
The video playing method of claim 5, further comprising:

Obtain server system time;

Determining, by using the system time, whether the time that the user terminal is configured to send the video stream address request and the system time is within a preset reporting time threshold, and if yes, determining The reporting time of the video stream address request is correct. Otherwise, the reporting time of the video stream address request is determined to be incorrect, and the video stream address request is rejected.
The video playing method according to claim 5, wherein if the target video is a target network live video, the request identification identifier group further includes a room identification code of the target network live video, where the The second Key value includes a live type identification code and a room identification code of each live webcast video in the scope of the viewing user's rights.
A video request method is applied to a user terminal, and includes:

Sending a video stream address request for the target video to the server;

Receiving, by the server, a first Key value for characterizing a video type of the target video and a second Key value for characterizing a permission range of the viewing user; or receiving a representation for returning by the server a first Key value of a video type of the target video, a second Key value for characterizing a permission range of the viewing user, and a random number;

Generating, by the first key value and the second key value, a terminal-side authentication key value for the target video, and sending the value to the server, or according to the first key value and the second key value. And generating, by the random number, a terminal side authentication key value for the target video, and sending the value to the server, so that the server receives the terminal side authentication key value for the target video to the user terminal Returning the target video;

Receiving the target video from the server.
The video request method according to claim 8, wherein the video stream address request carries a request identification identifier group;

Generating, according to the first Key value and the second Key value, a terminal for the target video And the side authentication key value is sent to the server, including: generating a terminal side authentication key value for the target video based on the first key value, the second key value, and the request identification identifier group; Sending, to the server, a terminal side authentication key value of the target video;

Or generating, by the first key value, the second key value, and the random number, a terminal side authentication key value for the target video and sending the value to the server, including: a key value, the second key value, the random number, and the request identification identifier group generate a terminal side authentication key value for the target video; and send a terminal side authentication key value for the target video to The server. A video playback device, applied to a server, wherein the video playback device comprises:

An address request receiving module, configured to receive a video stream address request for the target video sent by the user terminal;

a Key value sending module, configured to return, to the user terminal, a first Key value for characterizing a video type of the target video and for characterization if a viewing user corresponding to the user terminal has viewing rights to the target video Viewing a second Key value of the user's permission range, or returning to the user terminal a first Key value for characterizing the video type of the target video, and a second key for characterizing the permission range of the viewing user Value and random number;

a video returning module, configured to receive, when used by the user terminal, a terminal-side authentication key value for the target video generated by using the first key value and the second key value, or for receiving a location Returning the target video to the user terminal when the terminal-side authentication key value for the target video generated by the user terminal is generated based on the first key value, the second key value, and the random number .
A video requesting device is applied to a user terminal, wherein the video requesting device includes:

An address request sending module, configured to send a video stream address request for the target video to the server;

a Key value receiving module, configured to receive a first Key value returned by the server for characterizing a video type of the target video, and a second Key value for characterizing a permission range of the viewing user, or for receiving Determining, by the server, a first Key value for characterizing a video type of the target video, a second Key value for characterizing a permission range of the viewing user, and a random number;

An authentication key value obtaining module, configured to generate, according to the first key value and the second key value, a terminal side authentication key value for the target video, and send the value to the server, or according to the foregoing a Key value, the second Key value, and the random number generate a terminal side authentication Key value for the target video and send the value to the server, so that the server receives the terminal side for the target video The target video is returned to the user terminal when the Key value is authenticated.